Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/v17jTRbK_t9X5tMtsAfu6YUInR8.roa
File: v17jTRbK_t9X5tMtsAfu6YUInR8.roa (raw, json)
Hash identifier: sNmcOkUDoPJZgAzFrMAYKFuh3+UiVlwzpNr+rAn2DB0=
Subject key identifier: BF:5E:E3:4D:16:CA:FE:DF:57:E6:D3:2D:B0:07:EE:E9:85:08:9D:1F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0188C5EFBFEA51EE7520BBBAD0A3BC176AF8
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/v17jTRbK_t9X5tMtsAfu6YUInR8.roa
Signing time: Fri 16 Jun 2023 20:40:03 +0000
ROA not before: Fri 16 Jun 2023 20:40:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.250.244.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
62.112.30.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
89.40.43.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:ef:bf:ea:51:ee:75:20:bb:ba:d0:a3:bc:17:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 16 20:40:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf5ee34d16cafedf57e6d32db007eee985089d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:ca:2f:16:8c:07:67:9e:0c:c0:e6:6e:cd:
f9:9a:aa:1d:a1:f7:7d:02:9d:b9:7d:e8:5c:71:f5:
1c:5a:b4:17:70:ee:2e:65:03:96:d6:c2:e4:87:a3:
70:55:c7:d3:4b:b6:1d:94:e4:c7:95:50:f8:63:9c:
75:4e:fa:a4:ba:0d:fe:50:63:29:1d:05:5a:bd:86:
81:4a:47:42:bd:c4:82:ec:2e:46:d6:b5:fa:f9:d8:
fe:c9:93:c4:5b:2f:26:72:86:5b:75:2d:e5:5c:2c:
f1:92:a4:a0:ca:fd:a7:f0:41:9e:bf:cf:eb:7d:ae:
84:ce:9b:e1:e1:ef:f9:1b:5c:1d:98:8c:59:de:f6:
3b:a1:3d:8e:8f:d6:16:87:7d:c3:bf:fb:a3:f0:60:
07:34:44:1e:73:af:8e:e5:d4:91:05:f5:5b:ca:c8:
58:b8:20:54:39:94:87:ca:b4:7c:ab:44:d2:f6:b8:
e3:4c:00:23:3f:7f:58:86:c0:e9:b0:dc:c4:10:29:
05:8f:14:51:71:43:dc:34:6e:12:dc:6a:0d:ff:90:
8d:34:28:8f:44:dc:f2:82:02:ad:c1:4d:c1:14:fc:
8d:ab:65:09:75:df:e5:59:b6:71:77:35:1f:ad:dd:
91:3d:97:22:56:d6:bd:68:4b:4a:9b:72:69:e9:3e:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:E3:4D:16:CA:FE:DF:57:E6:D3:2D:B0:07:EE:E9:85:08:9D:1F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/v17jTRbK_t9X5tMtsAfu6YUInR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.30.0/24
89.37.128.0/24
89.40.43.0/24
91.250.244.0/24
93.114.69.0/24
94.177.113.0/24
94.177.118.0/24
188.211.249.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9b:88:7f:b6:78:2f:f3:62:fb:b0:47:5e:00:fa:db:f9:8c:
e6:e6:0d:59:d4:95:eb:29:61:ca:cd:98:b4:67:58:21:df:c2:
07:7d:c8:08:3f:12:30:a1:b9:ae:83:bb:53:87:6a:0d:42:6a:
9f:69:1c:62:0b:b2:18:05:bf:74:fc:ac:52:b7:cf:5b:02:19:
9f:55:e2:2e:a5:21:74:e4:f0:37:11:ea:7c:05:5a:a1:84:39:
cf:51:8e:f2:45:74:c3:ad:05:ac:0d:99:df:5a:7f:dc:16:b9:
73:0f:2f:8f:35:e6:4b:b2:a8:34:07:c5:ca:50:9a:16:74:ab:
bb:dd:5b:4a:f9:ce:92:bf:48:bf:80:0d:7b:0d:f2:4f:81:6f:
05:f0:e6:65:ef:cd:68:66:aa:c6:a6:c4:11:31:b0:aa:e9:fc:
98:1d:45:71:21:32:70:11:b6:cb:6e:30:69:36:8d:b9:a2:79:
46:c6:62:ec:51:c1:cc:c5:3a:33:f2:fd:cc:41:57:22:6f:32:
3d:b2:11:ad:f1:de:e3:cd:33:e7:96:c8:52:57:fc:f1:56:0d:
56:d4:e4:ee:9d:e7:ee:49:ce:6d:b3:aa:a7:d8:ec:22:2e:09:
e3:84:82:51:79:d9:ed:42:0a:86:23:a1:38:2c:d0:86:e8:40:
e5:f3:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org